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Abstracts The communication distance of QKD is limited by exponential 
attenuation of photons propagating through optical fibers. However, it has 
been shown that introducing a quantum repeater can improve the order of the 
attenuation and is useful for extending the communication distance of QKD 
when the repeater noise is ignored. In this paper, we analyze the effectiveness 
of the quantum repeater when taking the repeater noise into consideration. We 
analyze the effectiveness also from the viewpoint of the security and show that 
QKD is secure even if a quantum repeater is used. 

1 Introduction 

There is an everlasting threat that a current practical cryptographic scheme 
whose security is based on computational assumptions will become insecure due 
to a future improvement of computers. Therefore, quantum key distribution 
(QKD), e.g. BB84 2 and B92, has been attracting considerable attention be- 
cause its security is based only on quantum principles and it is unconditionally 
secure. 

Due to exponential attenuation of photons in the channel, the naive QKD 
is valid only in the range of short distance. It is important to extend the 
communication distance from a practical viewpoint. So far, three approaches 
have been proposed to extend the range of QKD: 

1. Protocol modification for multiple photon emission: Protocol modifications [7] 
which make the scheme robust against the photon number splitting(PNS) at- 
tack were proposed. However, modified protocols can extend the range of QKD 
to only a few times that of the original. Due to this limit, further extensions 
require introduction of other improvements. 

2. Coherent states: Some protocol using coherent statesQ were proposed. It 
was demonstrated that they are more resistant to noises than the single photon 
protocols and can achieve high bit rate even in long distance. However, its 
security has been discussed enthusiastically [S| El- In this paper, we do not 
consider this. 

3. Quantum repeater protocol: In order to reduce noises on quantum state 
transferred through the optical fiber, quantum teleportation is used to send the 
quantum state by using an EPR pair generated by a quantum repeater protocol. 
We call such a scheme QKD with quantum repeater. The quantum repeater 
recursively applies entanglement swapping(ES) and entanglement purification 
protocol(EPP) to short-length-EPR pairs 4 . It was demonstrated in 0] that 
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a quantum repeater protocol can generate the long-length-EPR pair for the 
quantum teleportation with high fidelity. 

At a glance, the quantum repeater seems to be the most promising approach 
of the three approaches. However, the discussion in ^ seems to assume that 
noises in quantum memory on checkpoints can be negligible. Therefore, we 
reexamine the practical possibility of the quantum repeater by evaluating the 
order of the bit rate with considering the repeater noise. Although the repeater 
noise is noticed in the evaluation is done without the repeater noise. We 
also examine the security of QKD with quantum repeater. 

In Section |21 we review the quantum repeater protocol in [3]. In section |3 
we categorize noises that occur in the protocol. In Section 0] we evaluate the 
bit rate without considering the repeater noise. In Section [5] we evaluate the 
bit rate with considering the repeater noise. In Section [HI we prove the security 
of QKD with quantum repeater. In Section we provide a summary of this 
paper. 

2 Quantum repeater protocol 

The quantum repeater is a scheme which extends the length of an EPR pair 
with high fidelity. In this section, we review the quantum repeater protocol in 
® 

2.1 Abstract specification 

We explain an abstract specification of the quantum repeater protocol. The 
protocol recursively applies ES and EPP to short-length-EPR pairs and finally 
generates a long-length-EPR pair with high fidelity. 

Let L be the number of EPR pairs which are linked in a single ES execution, 
N be the number of checkpoints and n be the depth of the recursive executions. 
These satisfy a relation, N = L n . In the channel between the sender A and the 
receiver B, N — 1 checkpoints, denoted C\,C^ ■ ■ ■ . Cjv-i, are settled. For con- 
venience, A and B are denoted Co and Cat, respectively. The distance between 
A and B is denoted as D and the distance between two adjacent checkpoints is 
denoted as d. That is, D = Nd. 

Then, quantum repeater protocol can be written as follows. 

• Initialization: At each checkpoint Cj, i — 0, • • ■ , N — 1, EPR pairs are 
generated and one photon of each pair is sent to the next checkpoint Cj+i. 

• FORx = 1 to n 

— ES: Execute ES in each of the checkpoints C kL *-i, (k = 1, 2, •■ • .A/L^ -1 ) 
except Cl* , C2L* , ■ • • , Cn-l* ■ Then, the EPR pairs of length L x 
can be obtained. 

— EPP: Execute EPP for EPR pairs in each of the checkpoints 
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• Then, the EPR pairs of length L x with high fidelity can be obtained. 

After completing the above protocol, an EPR pair with high fidelity shared 
between Co and Cjv is obtained. 

2.2 Entanglement swapping 

In ES, partners of two EPR pairs are swapped. Here, we provide an explicit 
realizations of ES based on local measurement. ES can also be realized based 
on Bell measurement. 

First, Controlled NOT gate (CNOT) is applied to photons 2 and 3 of |0 + )i, 2 ® 
|</ ,+ )3 4- Next, WH(Walsh-Hadamard) transformation is applied and produces 
5(|0} 2 |0} 3 ® \<t> + )i A + |0> a |l)a ® |^ + }i, 4 + |1) 2 |0> 3 ® \4>~ >i,4 + |1> 2 |1> 3 <8> |V~>m)- 
Then, one of four computational bases of photons 2 and 3 is measured and this 
measurement maps the state of two photons 1 and 4 into a Bell state. Here, 
the observed basis of photons 2 and 3 indexes the projected Bell state of pho- 
tons 1 and 4. In the next step, the projected Bell state of photons 1 and 4 is 
transformed into \<fi + ). For this purpose, the measurement results of photons 2 
and 3 are sent from a checkpoint having photons 2 and 3 to ckechpoints having 
photons 1 and 4 with the classical communication. 

2.3 Entanglement purification 

EPP pulls out an EPR pair of high fidelity from multiple EPR pairs of low 
fidelity. We consider an EPP which is also considered in 0|. 

The validity of EPP requires that the fidelity of EPR pairs before the pu- 
rification should be in a certain range. It is demonstrated as follows. Let F and 
F be the fidelity of the EPR pairs before EPP and the fidelity of purified EPR 
pair, respectively. In the case that EPP generates the purified pair from two 
EPR pairs, F' can be expressed in terms of F as follows^: 

F' = $/A, whereF = (1 - F)/3, $ = F 2 + F 2 andA = F 2 + 2FF + 5F 2 . (1) 

In order that F' > F in Eq.JTJ), F should be in the range of 1/2 < F < 1. 

3 Noises 

Here, we categorize possible noises which occur during an execution of the pro- 
tocol. 

3.1 Noises during the protocol execution 

Several types of noises can occur during the execution of the quantum repeater 
protocol. We classify them by their causes. The measurement noise is noises 
which occur during a measurement of a quantum state. The one-qubit operation 
noise is noises which occur during a one-qubit operation in the protocol. The 
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two-qubit operation noise is noises which occur during a two-qubit operation in 
the protocol. The channel noise is noises of a quantum state transferring through 
the channel. The repeater noise is noises of a quantum state in the repeater 
devices even in the absence of operation. Here, the one-qubit operation and 
the two-qubit operation mean a unitary operation on one qubit and a unitary 
operation on two qubits, respectively. We consider that quantum noises which 
occur during the classical communication in the execution of EPP or quantum 
teleportation is an example of the repeater noise. 

The first three noises were modeled and analyzed in 0|. For the channel 
noise and the repeater noise, we evaluate with the order, such as exponential or 
polynomial. We review the models and analyses of the first three noises in the 
next subsection. 

3.2 Conventional models and analysis 

We show models of such noises and the modification of Eq. caused by these 
noises. Let p be a density matrix before operations. First, the one-qubit op- 
eration noise is modeled as p Oip = Pl O{ deal p + ^trip <g> h, where O x 
and 0\ deal are one-qubit operations with and without the noise, respectively, 
and I\ is the identity operator and p\ is the probability with which the oper- 
ations are performed without noise. The two-qubit operation noise is modeled 
as p — > O12P = P20\2 eal p + - z T 2 -tT\ip <8> I12, where Oi 2 and O l ^ al are two-qubit 
operations with and without the noise, respectively, and I\2 is the identity oper- 
ator and P2 is the probability with which the operations are performed without 
noise. The measurement noise is modeled as Pq = ?/|0}(0| + (1 — 7j)|l)(l|,P^ = 
77|1)(1| + (1 — r/)|0)(0|, where r\ is the probability with which the measurements 
are performed correctly and Pg and P^ are POVM |0)(0| and |1)(1|, respectively, 
with error probability 77. 

Based on the above noise models, the fidelity, Fl, after linking L EPR 

pairs by ES executions is expressed as F L = | + | ^£i£il^2_^il^ ( 4F 3 -1 ) L . 
Similarly, based on the above noise models, the change of the fidelity by EPP 
is expressed as follows: 

F' = {9$ + 2r]f]E + n}/{6A + 4(27777- + II)}, (2) 

where fj = 1 — i], 6 = i] 2 + fj 2 , 5 = FF + F 2 and LT = -s-^ 2 -. F and F have 
three intersections. Let two intersections except 0.25 be F m i n andF max , where 
F m in < F max . Then, in order that F > F in Eq.J2l, F should be in the range 
of F m i n < F < F max . The range of F where the quantum repeater is valid 
become narrow as noises become large. 

4 Bit rate in absence of repeater noise 

In 0], it was demonstrated that the required amount of resources of the quantum 
repeater increases as a polynomial function of the distance between A and B, D. 
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This leads to the conclusion that the bit rate of the quantum repeater decreases 
as an inverse of a polynomial function of the distance. This result was derived 
under the condition that only the channel noise, the measurement noise, the 
one-qubit operation noise and the two-qubit operation noise are considered. 

Theorem 1. Consider QKD with quantum repeater. If only the channel noise, 
the measurement noise, the one-qubit operation noise and the two-qubit opera- 
tion noise are considered, there exists a polynomial function p(-) such that the 
bit rate of the QKD decreases as il(p(D)^ 1 ). 

Here, g(n) = fl(f(n)) means 3c > 3N G NVn > N g(n) > cf(n). 

proof. The bit rate is estimated by considering both the merit of quantum 
repeater, keeping high fidelity, and the demerit, increase of resource. 

Let M be the number of EPR pairs consumed by a single execution of EPP. 
Then, the number of EPR pairs, R, in the whole execution of the quantum 
repeater, is R = (LM) n = L n M n = NM n = N{L [o ^ M ) n = N lo ^ M+1 , where 
N is proportional to the communication distance D, and L and M do not depend 
on D. Thus, R is a polynomial function of D. 

In this scheme, when not considering the repeater noise, the fidelity of the 
EPR pair generated by the quantum repeater protocol stays constant even if D 
increases. So, the bit rate of the QKD decreases as il(p(D)^ 1 ). □ 

In contrast to exponential damping in the absence of the quantum repeater, 
the bit rate of QKD in the presence of the quantum repeater decreases as an 
inverse of a polynomial function of the communication distance. Although Theo- 
rem^does not indicate whether the exact value of the bit rate is really improved 
by the quantum repeater, it can be expected to be effective for sufficiently large 
D. 

5 Bit rate in presence of repeater noise 

We next consider the case the repeater noise is taken into account. In ES and 
EPP in the quantum repeater protocol, classical communications between re- 
peater devices are needed. In addition, quantum teleportation sends classical 
information from A to B. During these classical communications, the quantum 
states in the repeater devices lose their fidelity. We assume the repeater noise 
as follows: The fidelity of a quantum state in a repeater device decreases expo- 
nentially with respect to the time length of a classical communication. We call 
the assumption of this model the exponential damping assumption. 

Theorem 2. Under the exponential damping assumption, the bit rate of QKD 
with quantum repeater decreases asymptotically exponentially with respect to the 
distance D. 

proof. The length of EPR pairs increases as the quantum repeater protocol 
proceeds. As far as the length is small, the fidelity can be recovered by EPP. 
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However, if the length exceeds a threshold, D t h, then the fidelity becomes lower 
than F m i n and EPP can't recover the fidelity any more. The reason is that EPR 
pairs have to stay in quantum memory on ckeckpoints during classical commu- 
nication and the time of classical communication becomes large as the length of 
EPR pairs become large. Thus, time of being affected by the repeater noise get 
larger. After the fidelity goes under the threshold of EPP, the fidelity continues 
to decrease as the quantum repeater protocol proceeds. So, after crossing the 
threshold, AF ES + AF EP p + AF B , N > AF RN , where AF ES ,AF EPP and AF RN 
are the fidelity decreases due to ES, EPP and the repeater noise, respectively, 
during an iteration in the recursive execution of the quantum repeater protocol. 
The dumping due to the repeater noise is exponential according to the expo- 
nential dumping assumption. So, the overall dumping is exponential according 
to the equation above. □ 

Of course, there may be many other quantum repeater protocols. However, 
in general, our result holds for protocols as long as the classical communication 
whose distance is proportional to the distance between a sender and a receiver 
is used in the protocols. 

So, it is important to suppress the repeater noise as small as possible. As 
the repeater noise gets smaller, the range where quantum repeater can improve 
the bit rate becomes wide. 



6 Security 

The security proof can be done with simple idea. Let I E be the amount of 
eavesdropper's information and P CO nt be the person who controls the quantum 
repeater unit and Eve be an eavesdropper. The following relationship holds for 
Ie- {Ie in original QKD)> (I E in QKD with quantum repeater, where P con t is 
Eve)> (I E in QKD with quantum repeater, where P con t is except Eve). 

The reason is as follows. For QKD with quantum repeater, Eve can get more 
information (or equal at least) when he controls repeater unit more than when 
he does not. So, (I E in QKD with quantum repeater, where P CO nt is Eve)> 
(Ie in QKD with quantum repeater, where P CO nt is except Eve). Thus, it is 
sufficient to prove the security when repeater unit is controlled by Eve. Here we 
deal with QKD protocols where operations for quantum repeater protocol can be 
done within attacks allowed for Eve in original QKD protocol. Unconditionally 
secure protocols, such as BB84|2J, belong to this category because Eve is allowed 
to do almost every quantum operations as attacks. So, when repeater unit is 
controlled by Eve, operations for quantum repeater can be considered as a part 
of Eve's attacks allowed in original QKD. Then, (I E in original QKD)> (I E in 
QKD with quantum repeater, where P CO nt is Eve). Thus, we can turn the proof 
of QKD with quantum repeater into the proof of original QKD. 
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7 Summary 



We demonstrated that the bit rate of QKD with quantum repeater decreases 
asymptotically exponentially with respect to the communication distance when 
the repeater noise is taken into account. This is because EPP can not work 
when the length of EPR pairs exceed the threshold. In contrast, quantum 
repeater protocol works when the length of EPR pairs does not exceed the 
threshold. This threshold depends on the largeness of the repeater noise. So, it 
is important to suppress the repeater noise in order to enlarge the range where 
quantum repeater is effective. Besides, we showed abstract of proof that QKD 
with quantum repeater is secure. 
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